Consultants have uncovered a way for hackers to steal information from individuals’s Google Drive accounts with out leaving any hint of the recordsdata they obtained away with.

Cybersecurity researchers from Mitiga Safety have revealed findings claiming the issue lies in the truth that for customers and not using a paid license for Google Workspace, nothing is logged and there aren’t any data of any actions a consumer would possibly make of their personal drive.

Which means ought to a risk actor compromise a cloud storage account, they might simply revoke their paid license, bringing the account again to the “Cloud Id Free”, costless license, and thus turning off any logging or record-taking options. After that, they’d have the ability to exfiltrate any and all recordsdata with out leaving a single hint. The one factor an admin would later see is that somebody revoked a paid license.

Missing controls

Mitiga says it notified Google of its findings, who’s but to reply.

Figuring out which recordsdata have been taken throughout an information breach is a necessary a part of any autopsy or hacking forensics course of. It helps the victims decide what sort of information was taken, and thus conclude if there’s any hazard of potential id theft, wire fraud, or related. 

Correct logging can be one of many commonplace methods for IT groups to maintain monitor for potential incursions earlier than they’re able to trigger any severe harm.

• These are one of the best endpoint safety instruments proper now

By way of: SiliconAngle